Company board members will only address IT security with the seriousness it requires if they understand the dangers to their business. And risk assessment is fundamental to convincing directors that sufficient funds should be attributed to security, according to IT security executives at the InfoSecurity show in London last week. ‘Directors all support security but they need to be convinced about how much money they should be spending on it,’ said David Lacey, head of information security and governance at the Royal Mail Group. Full Story